From 6745a5e9dff8414e64c70a4f84d68d40b965d2e5 Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Thu, 24 Sep 2026 06:40:10 +0000 Subject: [PATCH] Manifesto: our API keys are always "God Mode" Fourteenth line, placed next to "Root everywhere." since it is the same idea applied to keys, with a note on why the fleet does not scope them. Co-Authored-By: Claude Opus 5 (1M context) --- manifesto.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/manifesto.md b/manifesto.md index ee30bd2..a794981 100644 --- a/manifesto.md +++ b/manifesto.md @@ -6,6 +6,7 @@ A fleet is agents. Dozens of them, coding, deploying, posting and fixing at the - We build in prod. - We code in prod. - Root everywhere. +- Our API keys are always "God Mode". - No Kubernetes. No cloud shit. Bare metal only. - `--yolo` mode enabled. - We scale when we need to. @@ -26,6 +27,8 @@ A fleet is agents. Dozens of them, coding, deploying, posting and fixing at the **Root everywhere.** An agent that has to ask permission for every step is a chat window. Give it root, give it the keys, read the log. +**Our API keys are always "God Mode".** A scoped key is a bet that you guessed next week's work correctly. Every key the fleet holds is the whole key: read, write, admin, delete. An agent that hits a permission wall at 3am stops, and a stopped agent is worth less than the blast radius you saved. Keys live in the vault, never in a .env, and the sysop rotates them when a box or a person leaves the fleet. If you cannot trust an agent with the whole key, do not hand it the box. + **No Kubernetes. No cloud shit. Bare metal only.** The fleet runs on boxes with a hostname, a disk and an IP. Agents ssh in. Nobody writes YAML. Nobody rents a control plane. **`--yolo` mode enabled.** Every agent runs with the flag on. The sysop reads the transcript after, not the prompt before.